I believe that this will only happen (if at all) once the cheap money has disappeared, the industry starts to realise how much money it's burning on failed proj

I believe that this will only happen (if at all) once the cheap money has disappeared, the industry starts to realise how much money it's burning on failed projects, and regulators impose substantial fines onto any companies that had security breaches demonstrably due to negligence. Then maybe we will start taking this profession a bit more seriously and not demand 200k+ salaries while refusing to read anything that isn't just a glorified sales pitch.